PT-2013-5396
CVE-2013-5151
·
Published
2013-09-19
·
Updated
2013-10-22
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 7
Description
The issue allows remote attackers to conduct cross-site scripting (XSS) attacks by uploading a file, due to the failure to prevent HTML interpretation of a document served with a text/plain content type.
Recommendations
For versions prior to 7, update to version 7 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾